By “Personal Information” we mean all data concerning a natural person who is identified or identifiable, including indirectly, or any data concerning an individual whose identity can be ascertained by means of additional information. “Processing of Personal Information” means all operations concerning the collection, recording, organisation, structuring, storage, consultation, compiling, adaptation or alteration, selection, extraction, comparison, use, interconnection, blocking, communication, distribution, erasure and destruction of the Personal Information, as well as its storage in a database.
The Site will always and without exception process Personal Information under the principles of correctness, lawfulness and transparency.
Categories of Personal Information
The Site processes various categories of Personal Information.
In the first place, the Site processes the Personal Information collected from You in the interaction with the device employed to access the Site: for instance, IP address, browser information, operating system, type of device used, the pages You visited and the searches You performed. Personal Information processed at this stage is strictly necessary to enable navigation on the Site or to make it more functional.
The Site expressly requires You to share Personal Information when You activate the procedure for registering on the Site and/or in order to make an Order.
Furthermore, the Site processes your Personal Information to send You communications of a commercial nature: for example, when You subscribe to newsletters. In this case, processing of Personal Information will be strictly conditional upon your previous and unambiguous consent.
The Site always asks for your explicit and separate consent before carrying out profiling activities for marketing purposes.
The Site always indicates to You where any communication of Personal Information is mandatory or optional.
The Site may also perform checks, either directly or indirectly, on the payment methods used to complete orders with the main purpose of preventing insolvencies or fraudulent activities.
The withholding of consent to the processing of Personal Information for purposes unrelated to the functioning of the Site and/or execution of orders on the Site will not bear any significant consequences for you.
Personal Information is used by the Site only when necessary for the specific purpose for which such Personal Information is collected and subsequently processed.
The purpose of the processing of Personal Information
We process Personal Information for the purposes of fulfilling orders made on the Site and providing customer service. In this context, the processing of Personal Information is lawfully based on the obligation that we provide You with services and to fulfil contractual obligations.
Moreover, subject to your explicit consent, we process Personal Information to execute promotional and commercial activities, direct sales, as well as for market research and other advertising activities directed specifically to You. In such situations, the processing of the Personal Information is legitimately based on your valid consent or on our legitimate interest.
When marketing activities are specifically based on your taste, shopping experience and interests (“profiling”), your specific and separate consent to profiling is an essential condition prior to carrying out any profiling activities in a legitimate manner.
On the basis of the legitimate interest to improve services and products to Customers, we may send You promotional emails containing communications, promotions, discounts, feedback requests or updates. However, You always hold the right to opt out from receiving commercial communications (for example, by clicking on the link placed in these emails).
Communication of Personal Information
We may communicate part of the Personal Information processed to third-party operators involved in the fulfilment of orders. This it the case, for example, of the courier carrying out deliveries of products ordered on the Site. In this case, the communication of Personal Information to suppliers, in their quality of data processors, is necessary for Us to fulfil contractual obligations that arise from the conclusion of orders.
This is without prejudice to the cases where the communication or disclosure of Personal Information is required by law.
In all other cases, any communication or distribution of Personal Information is subject to your prior, explicit and unequivocal consent.
You can always ask to Us for an updated list of the categories of data processors involved in the processing of your Personal Information by email to: [email protected]
Retention period for Personal Information
Once the processing of Personal Information is no longer required, we will promptly delete or anonymise such Personal Information. For instance, we shall retain Personal Information for a sufficient period in order to provide you with the services requested, and/or to fulfil legal or tax obligations.
In order to determine the appropriate retention period for Personal Information, we will take into account various factors to ensure that Personal Information is not stored for longer than is necessary or appropriate. These factors also include the purposes for processing Personal Information and the type of relationship established with You (how often You connect to the Site, how often You purchases on the Site, etc.).
Data Protection Rights
You have the right to obtain from Us confirmation as to whether or not Personal Information which concerns you is being processed and, when that is the case, access to such Personal Information.
You also have the right to be informed about:
- the source of the Personal Information processed;
- the purpose, and the legal basis, of Personal Information processing;
- the legitimate interests that may be pursued by Us, in those cases these constitute the legal basis for the processing itself;
- the existence of an automatic decision-making process, including profiling;
- the retention period of Personal Information.
You also have the right to request from Us that your Personal Information is:
- updated, corrected or (where info are incomplete) supplemented;
- deleted, if:
- Personal Information is no longer necessary for the purposes for which was collected or processed;
- You revoke your consent to, or oppose, its processing;
- Personal Information is processed unlawfully, or must be deleted in order to comply with a legal obligation;
You have the right to obtain from Us processing restrictions where one of the following applies:
- You contest the accuracy of the Personal Information, for a period enabling Us to verify the accuracy of the Personal Information;
- the processing is unlawful and You oppose the erasure of the Personal Information and request the restriction of their use instead;
- We no longer need the Personal Information for the purposes of the processing, but You require them for the establishment, exercise or defence of legal claims;
- You have objected to processing pending the verification whether our legitimate grounds override yours.
You have the right to oppose, entirely or in part:
- the processing of your Personal Information for legitimate reasons;
- the processing of your Personal Information, for the purpose of sending advertising material or for direct sales, or for conducting market research, or for commercial communications.
You have the right to receive your Personal Information that we have previously collected from You in a structured, commonly used and machine-readable format and have the right to transmit such Personal Information to another controller without hindrance from us, where:
- the processing is based on consent; and
- the processing is carried out by automated means.
In exercising your right to data portability, You have the right to have the Personal Information transmitted directly from one controller to another, where technically feasible.
You have the right to file a complaint with the Data Protection Authority or with any other competent supervisory authority.
Personal Information transfers